From f23568fd0736277e09d0fd22b935dea2335b5a87 Mon Sep 17 00:00:00 2001 From: marcus Date: Thu, 20 Nov 2008 10:29:41 +0000 Subject: Fixes #531: Access permissions enforced git-svn-id: https://code.elgg.org/elgg/trunk@2468 36083f99-b078-4883-b0ff-0f9b5a30f544 --- engine/lib/metadata.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/engine/lib/metadata.php b/engine/lib/metadata.php index 2e6337694..e7f610601 100644 --- a/engine/lib/metadata.php +++ b/engine/lib/metadata.php @@ -422,7 +422,7 @@ $entity_guid = (int)$entity_guid; $access = get_access_sql_suffix("e"); - $md_access = get_access_sql_suffix("e"); + $md_access = get_access_sql_suffix("m"); return get_data("SELECT m.*, n.string as name, v.string as value from {$CONFIG->dbprefix}metadata m JOIN {$CONFIG->dbprefix}entities e ON e.guid = m.entity_guid JOIN {$CONFIG->dbprefix}metastrings v on m.value_id = v.id JOIN {$CONFIG->dbprefix}metastrings n on m.name_id = n.id where m.entity_guid=$entity_guid and $access and $md_access", "row_to_elggmetadata"); } -- cgit v1.2.3